up vote 0 down vote favorite
share [g+] share [fb]

I was using a free VPN to access a Germany-only site and forgot I left it on. Then I used my credit card to make online purchases; now I'm concerned about whether who ever runs the free VPN knows my credit card number. Is it possible even if I entered the card info into a https page?

Win 7 64-bit. IE 8.

link|improve this question
44% accept rate
feedback

2 Answers

up vote 1 down vote

If your online purchase was made on a secure site (using https), you shouldn't have to worry. HTTPS encrypts everything between the website and your browser, which your VPN provider cannot decrypt.

Some websites have the bad habit of using https only during the checkout process, and using regular http for everything else (including logging in). Your VPN provider can, in theory, exploit this. If you logged in to a website that saves sensitive info (like your personal details or credit card information), you might want to change your password.

link|improve this answer
A website that saves info? You mean cookies? Does a VPN provider have more access to personal info than an ISP? – verve Feb 4 at 3:37
feedback
up vote 0 down vote

The last step out from VPN to the server is unencrypted if you did not care to post your card number over https://.

It is always good to read the tourist guide before walking slippery path https://www.eff.org/https-everywhere

Note1

Everything that you posted over unencrypted connection (not having https://) is visible on other end of VPN or TOR (and in path between the other end and site you posted it)

In case you used https:// it stays between you and site in the other end, pants dry

link|improve this answer
"The last step out from VPN to the server is unencrypted if you did not care to post your card number over https://." <--- what do mean exactly? I'm unclear. – verve Feb 4 at 3:39
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.